Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-24430

Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution

Description

Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Acrobat Reader

  • unspecified to ≤ 2017.011.30175affected
  • unspecified to ≤ 2020.012.20048affected
  • unspecified to ≤ 2020.001.30005affected
  • unspecified to ≤ Noneaffected

References